[REQUEST] Lenovo ThinkPad T431s (GHETxxWW) Whitelist Removal

[Tpad]

Could someone please extract the whitelist information ONLY from this phoenix efi bios

need to know what lenovo FRU 's are allowed (or vendor/dev/subsys)

https://download.lenovo.com/ibmdl/pub/pc...uj11us.exe

currently installed wifi card:
Intel® Centrino® Advanced-N 6235
PCI\VEN_8086&DEV_088F&SUBSYS_52608086&REV_24


many thanks

[Oleh]

Could someone please extract the whitelist information ONLY from this phoenix efi bios

need to know what lenovo FRU 's are allowed (or vendor/dev/subsys)

https://download.lenovo.com/ibmdl/pub/pc...uj11us.exe

currently installed wifi card:
Intel® Centrino® Advanced-N 6235
PCI\VEN_8086&DEV_088F&SUBSYS_52608086&REV_24


many thanks

http://rghost.ru/7rtV9NkN2
run cmd as admin
in cmd run fptw64 -d bios_d.rom -bios
and report

[Tpad]

http://rghost.net/download/private/8h4kx...bios_d.rar

[Oleh]

http://rghost.net/download/private/8h4kx...bios_d.rar

dump very large.
you properly executed command?

fptw64 -d bios_d.rom -bios

[Tpad]

C:\fpt_6_7>fptw64 -d bios_d.rom -bios

Intel ® Flash Programming Tool. Version: 8.1.10.1286
Copyright © 2007 - 2012, Intel Corporation. All rights reserved.

Platform: Intel® QM77 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid

--- Flash Devices Found ---
W25Q128BV ID:0xEF4018 Size: 16384KB (131072Kb)


- Reading Flash [0x1000000] 11264KB of 11264KB - 100% complete.
Writing flash contents to file "bios_d.rom"...

Memory Dump Complete
FPT Operation Passed


has the same size with other backup tools

do you see the whitelist in there somewhere?

[Oleh]

C:\fpt_6_7>fptw64 -d bios_d.rom -bios

Intel ® Flash Programming Tool. Version: 8.1.10.1286
Copyright © 2007 - 2012, Intel Corporation. All rights reserved.

Platform: Intel® QM77 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid

--- Flash Devices Found ---
W25Q128BV ID:0xEF4018 Size: 16384KB (131072Kb)


- Reading Flash [0x1000000] 11264KB of 11264KB - 100% complete.
Writing flash contents to file "bios_d.rom"...

Memory Dump Complete
FPT Operation Passed


has the same size with other backup tools

do you see the whitelist in there somewhere?

ok

[BDMaster]

Could someone please extract the whitelist information ONLY from this phoenix efi bios

need to know what lenovo FRU 's are allowed (or vendor/dev/subsys)

https://download.lenovo.com/ibmdl/pub/pc...uj11us.exe

currently installed wifi card:
Intel® Centrino® Advanced-N 6235
PCI\VEN_8086&DEV_088F&SUBSYS_52608086&REV_24


many thanks

There are many checks about your WiFi Card and into many Module, this is the inquired :

79E0EDD7-9D1D-4F41-AE1A-F896169E5216_2145.ROM LenovoWmaPolicyDxe.efi

Whitelist Section (0x270h) :

00000000EC102387EC10320700000000
02000000DA0B23A70000000000000000
0000000086808F088680605201000000   86808F08 86806052 PCI\VEN_8086&DEV_088F&SUBSYS_52608086&REV_24 Offset 0x0290h
0000000086808F0886806A5201000000
020000008780DA070000000000000000
01000000DB0B3F190000000000000000
01000000DB0B3E190000000000000000
0100000099111E900000000000000000
0100000099111F900000000000000000
06000000000000000000000000000000

First char is an ID + 3 char filler then PCI / VEN ID



Remove Whitelist Mod :

79E0EDD7-9D1D-4F41-AE1A-F896169E5216_2145.ROM LenovoWmaPolicyDxe.efi

0A60 : 74 43              to  74 00                jz      short loc_AA5  to  jz  $+2
0A73 : 75 1A              to  75 00                jnz     short loc_A8F  to  jnz $+2
0A89 : 0F 84 5F 01 00 00  to  90 E9 5F 01 00 00    jz      loc_BEE        to  nop + jmp      loc_BEE
0AA3 : 75 C6              to  75 00                jnz     short loc_A6B  to  jnz $+2
0AE5 : 74 BE              to  74 00                jz      short loc_AA5  to  jz  $+2
0AF2 : 75 2D              to  75 00                jnz     short loc_B21  to  jnz $+2
0B08 : 75 17              to  75 00                jnz     short loc_B21  to  jnz $+2
0B1F : 74 1C              to  74 00                jz      short loc_B3D  to  jz  $+2
0B35 : 0F 84 6A FF FF FF  to  0F 84 00 00 00 00    jz      loc_AA5        to  jz  $+6
0B3B : EB B3              to  EB 00                jmp     short loc_AF0  to  jmp $+2

Or in alternative . . .

0AB0 : 79 16                          to  EB 16                               jns     short loc_AC8           to  jmp     short loc_AC8 
 
0AC8 : 48 B8 07 00 00 00 00 00 00 80  to  90 90 90 90 90 90 90 90 90 90 90    mov     rax, 8000000000000007h  to  nop x 10

Regadrs

P.S. Few words someone can copy yet

[qwinter]

Manufacturer: Lenovo
Model: Thinkpad T431s - 20AC-S00K00
Latest Bios Revision: GHET31WW (1.16) - 2015/03/18
Bios Link: https://download.lenovo.com/ibmdl/pub/pc...uj10us.iso

Wifi installed: Intel Centrino Advanced-N 6235
Wifi to install: Intel Dual-Band-Wireless-AC-7265

[BDMaster]

Use this tool run It as Admin and upload here the result file :

http://rghost.net/658W4s2SF http://tiny.cc/rwy24x

http://rghost.net/53128665 http://tiny.cc/bxy24x

Use AIDA64 tool too (cracked version to get FULL REPORT) and upload a Report too

let me know
Regards

[qwinter]

Use this tool run It as Admin and upload here the result file :

http://rghost.net/658W4s2SF http://tiny.cc/rwy24x

http://rghost.net/53128665 http://tiny.cc/bxy24x

Use AIDA64 tool too (cracked version to get FULL REPORT) and upload a Report too

let me know
Regards

The requested reports: http://rghost.net/private/8x9CLpsVG/2194...98d4260c1b